github-actions[bot] 5f72418577
Create rule S6781: JWT secret keys should not be disclosed (#3838)
* Add csharp to rule S6781

* Update RSPEC for .NET

* Address review comments

* Apply suggestions from code review

* Apply suggestions from code review

---------

Co-authored-by: sebastien-andrivet-sonarsource <sebastien-andrivet-sonarsource@users.noreply.github.com>
Co-authored-by: sebastien-andrivet-sonarsource <sebastien.andrivet@sonarsource.com>
Co-authored-by: Jamie Anderson <jamie.anderson@sonarsource.com>
Co-authored-by: Loris S <91723853+loris-s-sonarsource@users.noreply.github.com>
2024-04-03 17:33:30 +01:00

33 lines
968 B
Plaintext

include::../../../shared_content/secrets/description.adoc[]
== Why is this an issue?
include::../../../shared_content/secrets/rationale.adoc[]
=== What is the potential impact?
include::../impact.adoc[]
// How to fix it section
include::how-to-fix-it/flask.adoc[]
include::how-to-fix-it/python-jose.adoc[]
include::how-to-fix-it/pyjwt.adoc[]
include::how-to-fix-it/django.adoc[]
== Resources
include::../../../shared_content/secrets/resources/standards.adoc[]
=== Documentation
* Flask JWT documentation - https://flask-jwt-extended.readthedocs.io/en/stable/options.html#jwt-secret-key[Config - JWT_SECRET_KEY]
* Python-Jose documentation - https://python-jose.readthedocs.io/en/latest/jwt/index.html[JSON Web Token]
* PyJWT documentation - https://pyjwt.readthedocs.io/en/stable/api.html[API Reference]
* Simple JWT documentation - https://django-rest-framework-simplejwt.readthedocs.io/en/latest/settings.html#signing-key[SIGNING_KEY]
//=== Benchmarks